pythia-review

SUSPICIOUS. The skill’s stated behavior is coherent for PL/SQL review and its direct data access is proportionate, but the surrounding ecosystem raises medium supply-chain concerns: a local `pythia` CLI with unclear provenance in the skill, publication tied to a personal GitHub account, and transitive skill installation via `npx skills add`. No direct credential theft, exfiltration endpoint, or malicious action is shown in this specific skill text.